MOC 20742: Identity with Windows Server 2016

Please note: some dates are Fasttrack dates where we deliver this course in 4 days.

In this seminar, you will learn how to deploy and configure Active Directory Domain Services (AD DS) in a distributed environment, implement Group Policy, perform backup and restore, and troubleshoot Active Directory issues in Windows Server 2016. They also learn how to deploy additional AD server roles such as Active Directory Federation Services (AD FS) and Active Directory Certificate Services (AD CS).

This course is part of the MCSA Windows Server 2016. The corresponding exam can be purchased and carried out separately.


  • Installation and configuration of domain controllers
    • Overview of AD DS and its major components
    • Overview of AD DS Domain Controllers
    • Deployment of domain controllers
  • Management of objects in AD DS
    • Administration of user accounts
    • Management of groups
    • Management of computer accounts
    • Using Windows PowerShell for AD-DS administration
    • Implementation and management of organizational units
  • Advanced AD-DS infrastructure management
    • Planning and implementation of advanced multi-domain and forest AD-DS deployments
    • Provision of a distributed AD-DS environment
    • Configure AD-DS trusts
  • Implementation and administration of AD-DS sites and replication
    • Overview of AD-DS Replication
    • Configure AD DS Sites
    • Configure and monitor AD-DS replication
  • Implementation of Group Policy
  • Manage user settings with Group Policy Objects (GPOs)
    • Implementation of administrative templates
    • Configure folder redirection and scripts
    • Configuration of Group Policy Preferences
  • Securing AD DS
    • Securing domain controllers
    • Implementing security for accounts (password and blocking policies)
    • Auditing the authentication
    • Configuration of Group Managed Service Accounts (gMSAs)
  • Deployment and Management of Active Directory Certificate Services (AD CS)
    • Provision of Certification Authorities (CAs)
    • Administration of CAs
    • Troubleshooting and maintenance of CAs
  • Provision and management of certificates
    • Certificate templates
    • Provide, recall and restore certificates
    • Use of certificates in a business environment
    • Implementation and management of smart cards
  • Implementation and administration of Active Directory Federation Services (AD FS)
    • Overview of AD FS
    • AD-FS requirements and planning
    • Implementation of AD FS to enable single sign-on in different scenarios
    • Web application proxy
  • Implementation and administration of Active Directory Rights Management Services (AD RMS)
    • Overview of AD RMS
    • Provision and management of an AD-RMS infrastructure
    • Content protection with AD RMS
  • Implement AD-DS synchronization with Azure AD
    • Planning the directory service synchronization
    • Directory service synchronization with Azure AD Connect
    • Identity management with directory service synchronization
  • Monitor, manage and restore AD DS
    • Monitoring AD DS
    • Administration of the AD-DS database
    • Restoring AD-DS objects


  • Experience with AD-DS concepts and technologies in Windows Server 2012 or Windows Server 2016.
  • Experience of configuring Windows Server 2012 or Windows Server 2016
  • Experience with core networking technologies such as IP addressing, name resolution and Dynamic Host Configuration Protocol (DHCP)
  • Experience with Microsoft Hyper-V and basic server virtualization concepts
  • Aware of best practices in IT security
  • Practical experience with Windows client operating systems such as Windows 7, Windows 8, Windows 8.1 or Windows 10
  • First experience with the Windows PowerShell command line

At a glance

Course Nr. : MOC20742
Duration : 5 Days
Price: 2.390,00 € plus VAT
2.844,10 € incl. Vat


Request information

Target audience

AD-DS administrators, system and infrastructure administrators

Book course

Date on request

Back to the overview